This was on trusty/vivid/wiley and just tried on xenial with latest updates: same thing:
diff -u sssd.conf.ok sssd.conf --- sssd.conf.ok 2017-09-27 04:41:37.686277498 +0000 +++ sssd.conf 2017-09-27 04:43:10.589649195 +0000 @@ -26,7 +26,7 @@ ssh_known_hosts_timeout = 180 [domain/LDAP] -debug_level = 0x00F0 +debug_level = 240 #debug_level = 65535 # To force, that sss obtains group memberships via the ou=group subtree instead @@ -34,9 +34,7 @@ # However, since Solaris uses rfc2307bis wrt. automounter, we adjust the related # mapping - perhaps sometinmes Ubuntu supports automount entries via nss. ldap_schema = rfc2307 -ldap_autofs_map_object_class = automountMap ldap_autofs_map_name = automountMapName -ldap_autofs_entry_key = automountKey ldap_user_ad_account_expires = ds-pwp-account-expiration-time id_provider = ldap @@ -44,7 +42,6 @@ #chpass_provider = ldap #autofs_provider = ldap #hostid_provider = ldap -selinux_provider = none # NOTE: It is absolutely important to use the FQDN of the ldap server, NOT its # IP address, since the IP address is usually not in the CN or AltSubjectNames @@ -61,7 +58,6 @@ ldap_group_search_base = ou=group,ou=wg,ou=department,o=devision?one? ldap_netgroup_search_base = ou=netgroup,ou=wg,ou=department,o=devision?one? ldap_service_search_base = ou=services,ou=wg,ou=department,o=devision?one? -ldap_autofs_search_base = ou=wg,ou=department,o=devision?one? #ldap_sudo_search_base = #ldap_ns_account_lock @@ -90,3 +86,4 @@ # https://fedorahosted.org/sssd/ # https://jhrozek.fedorapeople.org/sssd/1.12.3/man/ # https://wiki.ubuntu.com/Enterprise/Authentication/sssd +ldap_default_authtok = AAAQAC9lCrBXPIv1mfF11myY8rhuPBmKpW2d9Rd5uwq4rQZHfsMkik6rC0sAtmy4am5e2+bFBtIWU6PzWPrsSqytwGcAAQID ** Changed in: sssd (Ubuntu) Status: Expired => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1430143 Title: sss_obfuscate breaks /etc/sssd/sssd.conf To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sssd/+bug/1430143/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs